Manifest

$ rpki-client -vvf rpki.co/repo/HYSP/10/2BD11CD437C912FF4AD38E2AE517C02F24648306.mft
File:                     2BD11CD437C912FF4AD38E2AE517C02F24648306.mft (raw, json)
Hash identifier:          Xu4ULuf74GSZryHnMv07PowE/s0irHRSx7WOt8YmmHo=
Subject key identifier:   34:ED:E6:09:29:2C:56:61:80:17:3F:00:CD:57:AF:F7:A2:AD:35:54
Authority key identifier: 2B:D1:1C:D4:37:C9:12:FF:4A:D3:8E:2A:E5:17:C0:2F:24:64:83:06
Certificate issuer:       /CN=7e6381cf357d23e9cf67e1c5a99c17ad1cbb4f10bea9e60949
Certificate serial:       489A355138B0781C89C23B43064A9B83E4543615
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf357d23e9cf67e1c5a99c17ad1cbb4f10bea9e60949.cer
Subject info access:      rsync://rpki.co/repo/HYSP/10/2BD11CD437C912FF4AD38E2AE517C02F24648306.mft
Manifest number:          04
Signing time:             Sat 08 Apr 2023 08:02:50 +0000
Manifest this update:     Sat 08 Apr 2023 07:57:50 +0000
Manifest next update:     Sun 09 Apr 2023 08:05:50 +0000
Files and hashes:         1: 91E8C1AA609241E419FF4C871B3E2532BF349477.cer (hash: UnduQ1s+WWGwy0H0f47sNyTvhRR6XTNJQPAPNJerbbU=)
                          2: 2BD11CD437C912FF4AD38E2AE517C02F24648306.crl (hash: kyxlDxusrjCgJF62f6PyFoGQngMgHHg6ZSFUWM+ty8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9a:35:51:38:b0:78:1c:89:c2:3b:43:06:4a:9b:83:e4:54:36:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf357d23e9cf67e1c5a99c17ad1cbb4f10bea9e60949
        Validity
            Not Before: Apr  8 07:57:50 2023 GMT
            Not After : Apr  9 08:05:50 2023 GMT
        Subject: CN=34EDE609292C566180173F00CD57AFF7A2AD3554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a4:6a:0e:75:d5:26:13:5e:1f:01:7f:43:e8:
                    81:9e:8d:5c:62:ef:ce:57:7f:c9:d2:4c:2a:e0:f6:
                    ab:19:ab:bd:54:32:a8:f5:2c:6e:5b:43:b9:9b:fd:
                    ff:41:4f:61:b7:68:97:e5:40:14:df:b0:e0:40:f0:
                    a4:53:25:eb:b7:c0:6c:3f:a6:45:4d:70:bf:11:8b:
                    0d:b2:18:62:d2:55:85:4b:d7:67:26:3f:0a:5f:be:
                    86:34:8a:87:39:c3:10:6c:d3:da:4c:84:ca:47:12:
                    05:b7:84:e7:0d:21:4b:4c:38:55:b7:ec:0a:7f:5d:
                    a5:d3:4c:b9:10:9c:d0:5b:7c:c2:f6:82:f9:df:c0:
                    d4:3f:e5:f9:8e:2e:ee:bd:5b:16:ad:3d:78:96:09:
                    db:e5:47:cd:95:cb:ab:da:88:04:73:43:60:6e:9a:
                    2a:37:f9:d3:ca:c6:e9:3e:77:ae:7d:6c:47:b7:36:
                    08:cb:e7:06:e3:72:57:46:70:e7:05:e0:c2:cc:1b:
                    67:a6:73:2b:63:1b:05:5f:9f:2a:f8:cc:9c:a2:d7:
                    21:50:c3:a0:4c:7c:69:f5:5f:2e:9d:a4:63:50:13:
                    91:d5:ff:f8:83:bb:b3:c8:43:e8:0a:1c:11:b8:0d:
                    16:76:99:27:39:55:91:42:14:fb:33:84:aa:11:fc:
                    f1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:ED:E6:09:29:2C:56:61:80:17:3F:00:CD:57:AF:F7:A2:AD:35:54
            X509v3 Authority Key Identifier:
                keyid:2B:D1:1C:D4:37:C9:12:FF:4A:D3:8E:2A:E5:17:C0:2F:24:64:83:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/10/2BD11CD437C912FF4AD38E2AE517C02F24648306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf357d23e9cf67e1c5a99c17ad1cbb4f10bea9e60949.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/10/2BD11CD437C912FF4AD38E2AE517C02F24648306.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a1:b6:17:9c:40:bb:7f:69:1e:cd:71:73:3e:49:1b:89:2c:
         70:32:66:0d:61:76:f0:84:b7:8a:84:a3:a7:5e:a5:e4:08:fa:
         f0:3a:71:23:8c:c9:75:18:0c:95:14:84:bb:17:75:86:c7:38:
         0e:8c:32:45:4e:ba:01:2b:92:49:c3:83:bb:5c:01:4a:bc:ae:
         53:5c:49:a2:e4:0b:dc:f1:b1:9e:b8:08:d1:3a:7a:7c:19:22:
         46:8b:e6:76:ab:ab:d2:86:78:b5:41:1b:57:f7:a2:d1:83:b1:
         c2:ab:d4:7c:a6:cd:9d:98:13:a1:b9:46:18:e7:4d:35:a3:b6:
         be:38:c9:60:13:e4:f4:88:a6:f9:17:db:f0:a7:0b:2b:59:81:
         c3:de:cd:51:0d:41:fc:ec:20:2f:e4:23:e2:f1:72:55:35:2a:
         c2:a6:21:2f:37:ae:47:fb:d9:ae:41:58:97:a5:70:f0:98:80:
         84:49:f8:ef:ad:ec:59:6b:52:ef:62:a6:cb:a6:50:28:af:2a:
         6c:8f:26:79:ac:5e:f0:ce:b7:f8:48:f8:75:4e:5c:a2:11:4d:
         47:69:63:cf:ae:6e:f3:9a:be:41:ca:c5:2f:6e:c0:e9:95:6b:
         76:5d:42:39:48:60:0d:7c:af:34:78:ec:d7:b3:5a:04:80:eb:
         a8:9a:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----